5 Oct
2014
5 Oct
'14
11:21 a.m.
Greetings to everybody.
Following Shellshock... There is another hole, called tmUnblock.cgi targetted on some Cisco Linksys routers:
http://www.scip.ch/en/?vuldb.12362
More info on Internet, for instance:
http://security.stackexchange.com/questions/68405/what-is-tmunblock-cgi-and-...
Even targeted at specific hardware, it is poking everywhere...
Short extract from my apache2.log 50.193.84.18 - - [05/Oct/2014:14:03:33 +0200] "GET /tmUnblock.cgi HTTP/1.1" 400 518 "-" "-"
Best regards. Tom - sp2lob